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A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) FROM 
THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1 . 1 36(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 
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2a)|3 This action is FINAL. 2b)D This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 1 1, 453 O.G. 213. 

D.ispositionofCl^s^^^^^^, 

4) £3 Claim(s) f-3f is/are pending in the application. C^(jJuiJL 

4a) Of the above claim (s) 2-3. 17-20. 27-28 is/are w i thdrawn from oona i dcra ti on . 

5) D Claim(s) is/are allowed. 

6) IEI Claim(s) 1.4-16.21-26 and 29-31 is/are rejected. 

7) \Z\ Claim(s) is/are objected to. 

8) D Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) Q The specification is objected to by the Examiner. 
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DETAILED ACTION 



1. Claims 1,4-16,21-26 and 29-31 have been examined and is rejected 
under 35 U.S.C. 102(e). Claims 2-3, 17-20, and 27-28 are now canceled by 
Applicant. 

2. This is a FINAL rejection necessitated with new grounds of rejection. 

Claim Rejections - 35 USC §102 

The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 
A person shall be entitled to a patent unless - 

(e) the invention was described in a patent granted on an application for patent by another 
filed in the United States before the invention thereof by the applicant for patent, or on an 
international application by another who has fulfilled the requirements of paragraphs (1), 
(2), and (4) of section 371(c) of this title before the invention thereof by the applicant for 
patent. 

The changes made to 35 U.S.C. 102(e) by the American Inventors Protection Act 
of 1999 (AIPA) and the Intellectual Property and High Technology Technical 
Amendments Act of 2002 do not apply when the reference is a U.S. patent resulting 
directly or indirectly from an international application filed before November 29, 2000. 
Therefore, the prior art date of the reference is determined under 35 U.S.C. 102(e) 
prior to the amendment by the AIPA (pre-AIPA 35 U.S.C. 102(e)). 

3. Claims 1,4-16,21-26 and 29-31 are rejected under 35 U.S.C. 102(e) 
as being anticipated by Thatcher, BtAl. (US 5,937,067). 
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As per claim 1: 

Thatcher, Et Al. teaches a method of distributing digitally encoded data, 
comprising: 

a) dividing said data into a multiplicity of frames, 

b) encrypting said frames, (col.5, lines 25-29) 

c) distributing multiple copies of the said data frames to multiplicity of 
users, each frame being distributed with a control field (col.5, line 63 thru 
col. 6, line 5) 

d) communicating a seed value for key generation to respective secure 
modules located at each of the multiplicity of users, (col.4, lines 44-46) 

e) decoding the data frames at respective users using keys derived from the 
seed value communicated to the secure module, the secure module being 
arranged to enable decryption of a respective frame only when said control field 
has been passed to the secure module (col.5, lines 13-24) 

f) passing a control message, for modifying and controlling the availability 
of keys, in the control field to the secure module at a selected one or more 
users, (col. 4, lines 38-46 and col.5, lines 29-37) 

g) at the secure module of the or each of selected user, in response to the 
said control message, controlling the availability of keys generated from the 
said seed value, thereby controlling access by the users to the said data, 
(col. 6, lines 56-67) 
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As per claim 4: Thatcher discloses each data frame includes a frame identity 
field, and each key generated by the secure module is specified to one frame 
identified by the said field, (col. 5, lines 27-31) 

As per claim 5: Thatcher discloses the step of distributing multiple copies of 
the said data comprises multicasting packets of data via a communications 
network to the plurality of users, (col. 4, lines 43-44) 

As per claim 6: Thatcher discloses a control message is distributed with a 
data frame to the multiplicity of users, a user identity field identifying a 
selected user or group of users is included in the control message, and the 
control message is acted on only by the user or group of users identified by the 
said user identity field, (col.6, lines 18-27) 

As per claim 7: Thatcher discloses a control message includes a stop flag, 
and in response to the stop flag the generation of keys at the or each selected 
user is stopped, (col.5, lines 10-22 and col.6, lines 6-8; it is necessary to 
have the BCM to generate /recover the key, else the key cannot be 
selected for generation/ recovery.) 

As per claim 8: Thatcher discusses returning a response signal from the 
secure module to the source of the control message. (coL5, lines 13-15) 
As per claim 9: Thatcher discloses a control message includes a contact 
sender flag, and the step of returning a response signal from the secure module 
is carried out when the contact sender flag is set. (col.5, line 63 thru coL6, 
line 5) 
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As per claim 10: Thatcher discusses transmitting a further control message to 
the user on receipt of the said response signal, (col. 5, lines 13-15) 
As per claim 11: 

Thatcher teaches a method of operating a customer terminal in a data 
communications system, the method comprising: 

a) receiving at the customer terminal a multiplicity of encrypted data 
frames, each with a control field (col. 5, lines 25-29) 

b) receiving at the customer terminal a seed value for key generation 
(col.4, lines 44-46) 

c) passing said seed value for key generation to a secure module located at 
the customer terminal, (col.5, lines 20-24) 

d) generating in the secure module using the seed value keys for decryption 
of data frames; (col.5, lines 25-37) 

e) decrypting using keys only those respective data frames for which a 
control field has been received; (col.6, lines 19-20) 

f) passing to the said secure module a control message received in the 
control field; and (col.4, lines 38-46 and col.5, lines 29-37) 

g) in response to the said control message controlling the availability of 
keys generated from the said seed value, thereby controlling access by the 
users to the said data. (coL6, lines 56-67) 

As per claim 12: 

Thatcher teaches a method data communications system comprising: 
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a) a remote data source arranged to output a plurality of frames^ (col.5, 
lines 25-29) 

b) encryption means for encrypting the plurality of frames with different 
respective keys, (col. 5, lines 20-24) 

c) communications channel arranged to distribute multiple copies of the 
encrypted data frames, each with a control field; (coL6, lines 8-9) 

d) . multiplicity of customer terminals arranged to receive from the 
communications channel respective copies of the encrypted data frames, 
(col.5, lines 24-27) 

e) a key generator located at a customer terminal and programmed to 
generate from a seed value keys for use in decrypting data frames; (col.7,lines 
15-19) 

f) a key control means connected to the key generator, the key control 
means comprising: 

an interface for receiving the control fields; and (coL6, lines 18-19) 
control means arranged to only release keys for decrypting those 
respective frames for which a control field is received and being arranged to, in 
response to the said control messages in control fields, control the availability 
to the user of keys generated from the seed value; and (coL5, lines 13-24) 

g) decryption means connected to the key generator and arranged to 
decrypt the data frames received at the customer terminal from the 
communications channel, (col.5, lines 29-37) 
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As per claim 13: Thatcher discusses the communications channel is a packet- 
switched data network, (col.4, lines 26-30) 
As per claim 14: 

Thatcher teaches a customer terminal for use in a method according to any one 
of claims 1 to 1 1 , the customer terminal comprising: 

a) a data interface for connection to a data communications channel; 
(col.6, lines 8-9) 

b) a key generator programmed to generate from a seed value keys for use 
in decrypting data frames: (coL5, lines 24-29) 

c) decryption means connected to the data interface and key generator and 
arranged to decrypt data frames received via the data interface (col. 5, lines 13- 
24) 

d) a key control means connected to the key generator, the key control 
means comprising: 

an interface for receiving control fields; and (col.6, lines 18-19) 
control means arranged to only release keys for decrypting those 
respective frames for which a control field; the control means being arranged 
to in response to control messages in control fields, control the availability to 
the user of keys generated from the seed value. (coL5, lines 29-37) 
As per claim 15: 

Thatcher teaches a data server for use in a method comprising: 
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a) a data interface for connection to a data communications channel; 
(col. 6, lines 6-9) 

b) means for outputting encrypted data frames with control fields via the 
data interface onto the communications channel for receipt by a multiplicity of 
customer terminals; (col.6, lines 18-20) 

c) means for outputting the control fields having control messages onto a 
data communications channel for controlling the operation of key generators at 
customer terminals, (col. 7, lines 9-26) 

As per claim 16: Thatcher discusses generating keys from the seed value by 
iterated operations on a seed value by selected ones of a plurality of 
predetermined functions. (coL5, lines 13-24) 

As per claim 21: Thatcher discloses applying different characteristic 
variations to data decrypted at different respective customer terminals, (col.7, 
lines 22-26) 

As per claim 22: Thatcher discusses the plurality of remote data sources, 
each outputting a respective plurality of frames, (col.7, lines 9-14) 
As per claim 23: Thatcher discusses the customer terminal receives a primary 
seed value common to different respective data streams from the plurality of 
data sources (col. 14, lines 41-46), and derives from the common primary key 
a plurality of different respective secondary seed values for decrypting frames 
from different respective data sources, (col. 14, lines 47-67) 
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As per claim 24: Thatcher discusses the data received from different data 
sources includes different respective source identity values, and the respective 
secondary seed value is generated from the primary seed value by modifying 
the primary seed value with the source identity value, (col. 5, lines 25-29) 
As per claim 25: Thatcher discloses each data frame includes a frame type 
field, (col.5, lines 16-24) 

As per claim 26: Thatcher teaches a method for storing a receipt including 
data from the frame type field, (col.5, lines 1-7) 

As per claim 29: See col.5, line 58- thru col.6, line 8 (it is necessary to 
have the ECM to generate/recover the key, else the key cannot be 
selected for generation/ recovery in order to decrypt.); discussing the 
control message received by the secure module causes the secure module to 
cease releasing keys. 

As per claim 30: See col.5, line 58- thru col.6, line 8 (it is necessary to 
have the ECM to generate /recover the key, else the key cannot be 
selected for generation/ recovery in order to decrypt.); discussing the 
control message received by the secure module causes the secure module to 
cease releasing keys. 

As per claim 31: See col.5, line 58- thru col.6, line 8 (it is necessary to 
have the ECM to generate /recover the key, else the key cannot be 
selected for generation/ recovery in order to decrypt.); discussing the 
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control message received by the key control causes the key control to cease 
releasing keys. 

***For further details of the rejections above, please refer to Thatcher, Bt 
Al. on COL.4, line 25.. .Et. SEQ. 

Conclusion 

4. Applicant's amendment necessitated the new ground(s) of rejection 
presented in this Office action. Accordingly, THIS ACTION IS MADE 
FINAL. See MPEP § 706.07(a). Applicant is reminded of the extension of 
time policy as set forth in 37 CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to 
expire THREE MONTHS from the mailing date of this action. In the event 
a first reply is filed within TWO MONTHS of the mailing date of this final 
action and the advisory action is not mailed until after the end of the 
THREE-MONTH shortened statutory period, then the shortened statutory 
period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1.136(a) will be calculated from the 
mailing date of the advisory action. In no event, however, will the 
statutory period for reply expire later than SIX MONTHS from the date of 
this final action. 
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Any inquiry concerning this communication or earlier communications 
from the examiner should be directed to LEYNNA T. HA whose telephone 
number is (703) 305-3853. The examiner can normally be reached on Monday 
- Thursday (7:00 - 5:00PM). 

If attempts to reach the examiner by telephone are unsuccessful, the 
examiner's supervisor, Kim Vu can be reached on (703) 305-4393. The fax 
phone number for the organization where this application or proceeding is 
assigned is 703-872-9306. 

Information regarding the status of an application may be obtained from 
the Patent Application Information Retrieval (PAIR) system. Status information 
for published applications may be obtained from either Private PAIR or Public 
PAIR. Status information for unpublished applications is available through 
Private PAIR only. For more information about the PAIR system, see 
http://pair-direct.uspto.gov. Should you have questions on access to the 
Private PAIR system, contact the Electronic Business Center (EBC) at 866-217- 
9197 (toll-free). 
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